PT-2013-3826

CVE-2013-2503

·

Published

2013-03-11

·

Updated

2015-03-27

Description by

CVSS 2.0
5.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Privoxy versions prior to 3.0.21
Description The issue makes it easier for remote HTTP servers to spoof the intended proxy service via a 407 HTTP status code by not properly handling Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream.
Recommendations For versions prior to 3.0.21, update to version 3.0.21 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2013-2503
ALT-PU-2015-1330
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com